AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Daniel Baer joined AbuseIPDB in June 2026 and has reported 5,678 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇨🇳 101.96.192.88	01 Nov 2026	2026-11-01T21:38:04.317384+02:00 irc.chewbakka.ch sshd[2615938]: Invalid user newadmin from 101.96.1 ... show more 2026-11-01T21:38:04.317384+02:00 irc.chewbakka.ch sshd[2615938]: Invalid user newadmin from 101.96.192.88 port 44746 2026-11-01T21:39:44.519109+02:00 irc.chewbakka.ch sshd[2616274]: Invalid user john from 101.96.192.88 port 53856 ... show less	Brute-Force SSH
🇨🇭 209.99.190.113	01 Nov 2026	2026-11-01T21:25:31.428124+02:00 irc.chewbakka.ch sshd[2613803]: Invalid user images from 209.99.190 ... show more 2026-11-01T21:25:31.428124+02:00 irc.chewbakka.ch sshd[2613803]: Invalid user images from 209.99.190.113 port 46702 2026-11-01T21:30:28.295996+02:00 irc.chewbakka.ch sshd[2614647]: Invalid user user from 209.99.190.113 port 39098 ... show less	Brute-Force SSH
🇭🇰 45.64.112.230	01 Nov 2026	2026-11-01T21:27:48.602387+02:00 irc.chewbakka.ch sshd[2614176]: Invalid user andrey from 45.64.112. ... show more 2026-11-01T21:27:48.602387+02:00 irc.chewbakka.ch sshd[2614176]: Invalid user andrey from 45.64.112.230 port 44108 2026-11-01T21:29:54.190967+02:00 irc.chewbakka.ch sshd[2614515]: Invalid user user_1 from 45.64.112.230 port 58362 ... show less	Brute-Force SSH
🇦🇷 186.109.203.150	01 Nov 2026	2026-11-01T21:23:12.943848+02:00 irc.chewbakka.ch sshd[2613411]: Invalid user odoo from 186.109.203. ... show more 2026-11-01T21:23:12.943848+02:00 irc.chewbakka.ch sshd[2613411]: Invalid user odoo from 186.109.203.150 port 41538 2026-11-01T21:29:40.982354+02:00 irc.chewbakka.ch sshd[2614478]: Invalid user andrey from 186.109.203.150 port 37268 ... show less	Brute-Force SSH
🇮🇹 37.103.223.105	01 Nov 2026	2026-11-01T20:30:37.724298+02:00 irc.chewbakka.ch sshd[2584350]: Invalid user be from 37.103.223.105 ... show more 2026-11-01T20:30:37.724298+02:00 irc.chewbakka.ch sshd[2584350]: Invalid user be from 37.103.223.105 port 56002 2026-11-01T20:39:08.975854+02:00 irc.chewbakka.ch sshd[2585800]: Invalid user markus from 37.103.223.105 port 41642 ... show less	Brute-Force SSH
🇰🇷 14.34.249.175	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-41773 alert_id: 13586 events: 1 crea ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-2021-41773 alert_id: 13586 events: 1 created_at: 2026-11-01T18:28:28Z message: Ip 14.34.249.175 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-11-01 18:28:28.031068627 +0000 UTC target_uri: ["/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] method: ["POST"] status: ["400"] user_agent: ["libredtail-http"] show less	Bad Web Bot Web App Attack
🇲🇽 189.178.81.16	01 Nov 2026	2026-11-01T19:56:10.716624+02:00 irc.chewbakka.ch sshd[2573241]: Invalid user csd from 189.178.81.16 ... show more 2026-11-01T19:56:10.716624+02:00 irc.chewbakka.ch sshd[2573241]: Invalid user csd from 189.178.81.16 port 50990 2026-11-01T20:05:40.642455+02:00 irc.chewbakka.ch sshd[2574824]: Invalid user user from 189.178.81.16 port 51784 ... show less	Brute-Force SSH
🇩🇪 2a01:4f8:140:33a3::2	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-bad-user-agent alert_id: 13574 events: 2 crea ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-bad-user-agent alert_id: 13574 events: 2 created_at: 2026-11-01T15:25:33Z message: Ip 2a01:4f8:140:33a3::2 performed 'crowdsecurity/http-bad-user-agent' (2 events over 2.241441447s) at 2026-11-01 15:25:33.251672723 +0000 UTC target_uri: ["/robots.txt","/news/article.php?url=https://www.tagesschau.de/inland/innenpolitik/us-truppenabzug-reaktionen-104.html\u0026title=Abzug%20von%20US-Soldaten%20war%20laut%20Pistorius%20absehbar\u0026source=Tagesschau\u0026date=2026-05-02%2011:24\u0026lang=de"] method: ["GET"] status: ["404","200"] user_agent: ["Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"] show less	Bad Web Bot Web App Attack
🇧🇷 177.106.58.64	01 Nov 2026	2026-11-01T14:04:36.583541+02:00 irc.chewbakka.ch sshd[2249971]: Invalid user chris from 177.106.58. ... show more 2026-11-01T14:04:36.583541+02:00 irc.chewbakka.ch sshd[2249971]: Invalid user chris from 177.106.58.64 port 42678 2026-11-01T14:12:18.733976+02:00 irc.chewbakka.ch sshd[2251371]: Invalid user admin from 177.106.58.64 port 50970 ... show less	Brute-Force SSH
🇧🇪 34.76.139.252	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-admin-interface-probing alert_id: 13553 event ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-admin-interface-probing alert_id: 13553 events: 3 created_at: 2026-11-01T11:41:05Z message: Ip 34.76.139.252 performed 'crowdsecurity/http-admin-interface-probing' (3 events over 457.734442ms) at 2026-11-01 11:41:05.191226714 +0000 UTC target_uri: ["/admin%2F.env","/admin","/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perple show less	Bad Web Bot Web App Attack
🇺🇸 50.6.202.106	01 Nov 2026	2026-11-01T13:24:24.045390+02:00 irc.chewbakka.ch sshd[2079562]: Invalid user user from 50.6.202.106 ... show more 2026-11-01T13:24:24.045390+02:00 irc.chewbakka.ch sshd[2079562]: Invalid user user from 50.6.202.106 port 45952 2026-11-01T13:25:39.036571+02:00 irc.chewbakka.ch sshd[2079801]: Invalid user ubuntu from 50.6.202.106 port 58596 ... show less	Brute-Force SSH
🇺🇸 50.6.205.37	01 Nov 2026	2026-11-01T13:21:25.219536+02:00 irc.chewbakka.ch sshd[2079060]: Invalid user ubuntu from 50.6.205.3 ... show more 2026-11-01T13:21:25.219536+02:00 irc.chewbakka.ch sshd[2079060]: Invalid user ubuntu from 50.6.205.37 port 55516 2026-11-01T13:24:30.153540+02:00 irc.chewbakka.ch sshd[2079569]: Invalid user ld from 50.6.205.37 port 53448 ... show less	Brute-Force SSH
🇰🇷 59.6.159.181	01 Nov 2026	2026-11-01T13:15:39.890609+02:00 irc.chewbakka.ch sshd[2077931]: Invalid user jayden from 59.6.159.1 ... show more 2026-11-01T13:15:39.890609+02:00 irc.chewbakka.ch sshd[2077931]: Invalid user jayden from 59.6.159.181 port 56686 2026-11-01T13:24:11.305992+02:00 irc.chewbakka.ch sshd[2079502]: Invalid user wfp from 59.6.159.181 port 37504 ... show less	Brute-Force SSH
🇺🇸 147.90.234.15	01 Nov 2026	2026-11-01T12:21:18.470996+02:00 irc.chewbakka.ch sshd[2051394]: Invalid user ibrahim from 147.90.23 ... show more 2026-11-01T12:21:18.470996+02:00 irc.chewbakka.ch sshd[2051394]: Invalid user ibrahim from 147.90.234.15 port 50234 2026-11-01T12:22:33.614701+02:00 irc.chewbakka.ch sshd[2051626]: Invalid user oem from 147.90.234.15 port 53600 ... show less	Brute-Force SSH
🇺🇸 216.45.63.131	01 Nov 2026	2026-11-01T12:16:38.977945+02:00 irc.chewbakka.ch sshd[2045480]: Invalid user unity from 216.45.63.1 ... show more 2026-11-01T12:16:38.977945+02:00 irc.chewbakka.ch sshd[2045480]: Invalid user unity from 216.45.63.131 port 53828 2026-11-01T12:21:35.615959+02:00 irc.chewbakka.ch sshd[2051439]: Invalid user admin from 216.45.63.131 port 43706 ... show less	Brute-Force SSH
🇺🇦 188.163.52.118	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-wordpress-scan alert_id: 13542 events: 4 crea ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-wordpress-scan alert_id: 13542 events: 4 created_at: 2026-11-01T10:19:26Z message: Ip 188.163.52.118 performed 'crowdsecurity/http-wordpress-scan' (4 events over 7.659579718s) at 2026-11-01 10:19:25.844092762 +0000 UTC target_uri: ["/wp-content/plugins/wp-time-capsule/readme.txt","/wp-content/plugins/LayerSlider/readme.txt","/wp-content/plugins/ninja-forms-uploads/readme.txt","/wp-content/plugins/super-forms/readme.txt"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0"] show less	Bad Web Bot Web App Attack
🇵🇱 45.138.12.45	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 13537 events: 1 created ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 13537 events: 1 created_at: 2026-11-01T10:05:02Z message: Ip 45.138.12.45 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-11-01 10:05:02.040277502 +0000 UTC target_uri: ["/wp-json/batch/v1"] method: ["POST"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇧🇷 189.101.75.145	01 Nov 2026	2026-11-01T11:27:27.147338+02:00 irc.chewbakka.ch sshd[2031914]: Invalid user ubuntu from 189.101.75 ... show more 2026-11-01T11:27:27.147338+02:00 irc.chewbakka.ch sshd[2031914]: Invalid user ubuntu from 189.101.75.145 port 6430 2026-11-01T11:44:59.242548+02:00 irc.chewbakka.ch sshd[2034907]: Invalid user adminftp from 189.101.75.145 port 6543 ... show less	Brute-Force SSH
🇫🇷 82.102.18.126	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 13533 events: 11 created_at ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 13533 events: 11 created_at: 2026-11-01T09:15:38Z message: Ip 82.102.18.126 performed 'crowdsecurity/http-probing' (11 events over 762.168252ms) at 2026-11-01 09:15:38.586472441 +0000 UTC target_uri: ["//wp-includes/wlwmanifest.xml","//xmlrpc.php?rsd","//blog/wp-includes/wlwmanifest.xml","//web/wp-includes/wlwmanifest.xml","//wordpress/wp-includes/wlwmanifest.xml","//website/wp-includes/wlwmanifest.xml","//wp/wp-includes/wlwmanifest.xml","//news/wp-includes/wlwmanifest.xml","//2018/wp-includes/wlwmanifest.xml","//2019/wp-includes/wlwmanifest.xml","//shop/wp-includes/wlwmanifest.xml"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇺🇸 184.185.26.51	01 Nov 2026	2026-11-01T10:05:26.170873+02:00 irc.chewbakka.ch sshd[1819542]: Invalid user admin from 184.185.26. ... show more 2026-11-01T10:05:26.170873+02:00 irc.chewbakka.ch sshd[1819542]: Invalid user admin from 184.185.26.51 port 37698 2026-11-01T10:08:05.886910+02:00 irc.chewbakka.ch sshd[1819997]: Invalid user user from 184.185.26.51 port 60748 ... show less	Brute-Force SSH
🇺🇸 40.124.84.171	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 13529 events: 1 created ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-cve-probing alert_id: 13529 events: 1 created_at: 2026-11-01T07:51:32Z message: Ip 40.124.84.171 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-11-01 07:51:32.636160465 +0000 UTC target_uri: ["/developmentserver/metadatauploader"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 zgrab/0.x"] show less	Bad Web Bot Web App Attack
🇦🇺 20.53.249.197	01 Nov 2026	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 13525 events: 11 created_at ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 13525 events: 11 created_at: 2026-11-01T07:05:22Z message: Ip 20.53.249.197 performed 'crowdsecurity/http-probing' (11 events over 3.203897167s) at 2026-11-01 07:05:22.281439548 +0000 UTC target_uri: ["/wk/index.php","/inputs.php","/ioxi-o.php","/function/function.php","/rip.php","/admin.php","/wp-content/uploads/index.php","/cache.php","/themes.php","/an.php","/index/function.php"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇨🇳 14.115.254.107	01 Nov 2026	2026-11-01T08:05:53.043058+02:00 irc.chewbakka.ch sshd[1783433]: Invalid user suresh from 14.115.254 ... show more 2026-11-01T08:05:53.043058+02:00 irc.chewbakka.ch sshd[1783433]: Invalid user suresh from 14.115.254.107 port 11779 2026-11-01T08:16:02.537356+02:00 irc.chewbakka.ch sshd[1785187]: Invalid user ubuntu from 14.115.254.107 port 10617 ... show less	Brute-Force SSH
🇨🇳 101.126.70.177	01 Nov 2026	2026-11-01T03:29:06.563944+02:00 irc.chewbakka.ch sshd[1724867]: Invalid user autossh from 101.126.7 ... show more 2026-11-01T03:29:06.563944+02:00 irc.chewbakka.ch sshd[1724867]: Invalid user autossh from 101.126.70.177 port 44340 2026-11-01T03:34:24.738631+02:00 irc.chewbakka.ch sshd[1725740]: Invalid user hadoop from 101.126.70.177 port 36506 ... show less	Brute-Force SSH
🇭🇰 207.57.127.177	01 Nov 2026	2026-11-01T03:23:19.787309+02:00 irc.chewbakka.ch sshd[1684110]: Invalid user sun from 207.57.127.17 ... show more 2026-11-01T03:23:19.787309+02:00 irc.chewbakka.ch sshd[1684110]: Invalid user sun from 207.57.127.177 port 27480 2026-11-01T03:32:25.594303+02:00 irc.chewbakka.ch sshd[1725447]: Invalid user satis from 207.57.127.177 port 50496 ... show less	Brute-Force SSH